B-24 · Medium
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
An interface moved into the host netns from another (
ip link set <dev> netns 1run inside a container orip netns) is seen only as the mover’s own request, in the mover’s netns, which names the device by its index there; netwatch cannot tell which host device arrived. It charges the move to the mover’s unit asunattributed(protecting yes), with no object to clear it by, so the mover stays protecting until reboot, even after the device is deleted. Fail closed: its failure holds traffic it may no longer steer
| Breaks | Status | Mitigation | Closes in |
|---|---|---|---|
| Available (§12d: a hold for a tool that no longer protects) | Open, temporary: closed by lane-change-path’s move-probe PR (fexit on __dev_change_net_namespace: the move becomes an Interface claim for the mover, cleared when the device goes), after the journal-versions PR and before the B-22 follow-up (coordinator, Nov 3) | planarian hold release <unit> lifts a hold the mover no longer warrants; or restart the machine | A |
The guarantees it narrows
None: a process or availability row.